digi.no

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:11:6a:8b:a6:07:64:46:cb:38:26:c0:c1:45:f6:d1:2d:e8 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=digi.no

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:11:6a:8b:a6:07:64:46:cb:38:26:c0:c1:45:f6:d1:2d:e8
Serial Number (int): 267263281297218856671560090525571673566696
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 27:a3:63:1b:73:ce:11:b3:d2:98:7e:7c:95:76:ef:e0:45:f9:3f:2a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 47:8b:ba:81:6a:58:0b:75:fe:12:63:48:13:81:f3:d6:c4:cc:4a:be
Fingerprint (sha256): 6a:fb:60:4a:3d:c3:83:74:65:1d:c1:e2:bc:27:11:4a:dd:cc:01:10:63:f3:44:c0:90:ce:20:79:27:94:ed:ce

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate digi.no

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for digi.no

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

digi.no
www.digi.no

Other certificates including the domain name digi.no

(limited to 100 certificates)
wallbrand.co
dcfit.turnosweb.app
erlend2.digi.no
digi.no
digi.no
www.penguinpeople.io
groupm.beaconforce.com
www.trumpcarestories.org
digi.no
www.parrify.com
cloud.workito.co.il
digi.no
digi.no
wallbrand.co
whitepaper.digi.no
f.link.mustard.love
1j2n061x3td.www.digi.no
mysomras.com
digi.no
www.waidy.it
www.couplemonitor.app
new-adventskalender.de
admin.ugyde.io
digi.no
digi.no
digi.no
erlend2.digi.no
ymd.development.fensi.in
www.crudewiser.com
whitepaper.digi.no
erickmendoza.com
employeronboarding.keeper.co.in
www.iamtheliquor.app
static.dev.getbusy.com
www.51hint.com
www.aduug.com
digi.no
digi.no
whitepaper.digi.no
www.marktompkins.me
digital.stratton-press.linkmalloc.com
whitepaper.digi.no
hueanh.com
invertecfoods.cl
trimbo.com
digi.no
digi.no
digi.no
digi.no
www.garrettspence.dev
vedur.arnigu.info
kalk.digi.no
kalkulator.digi.no
digi.no
digi.no
digi.no
admin.job.hoikushi-go.com
f.link.mustard.love
digi.no
whitepaper.digi.no
nakytec.com
www.redstonemail.app
cvmetalproducts.ca
digi.no
digi.no
whitepaper.digi.no
upliftstress.com
whitepaper.digi.no
digi.no
digi.no
dev.viviultra.app
www.matahari-amsterdam.nl
slw.ai
edificiouna.porcelanosapartners.com
whitepaper.digi.no
kolssak.afterword.com
digi.no
kalk.digi.no
digi.no
whitepaper.digi.no
app.bemoved.com.au
digi.no
digi.no
www.chen.enterprises
digi.no
digi.no
www.inthga.io
introvue.robinsoft.biz
www.ministryofpup.com
digi.no

Certificate

The complete raw certificate details for digi.no in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 267263281297218856671560090525571673566696
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-24 08:52:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-23 08:52:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'digi.no'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 898677014080481733519267195390469228364612796616532886750462210427892813282774682134728951068240310826709828734622046120882891927091211534000200342972308252838716462498158230691677803629023023781686058721721411645407080568776824888733161292237490560331441567331774417095349780389086385937084596568313183749939279198787507406854489840841663114001921242262900904571484700437991970529327771535443005427881841504906775396694805432573378045374790956681599882595554207606355494774050101823881592442040004630609328125733015170125966805028087430695923605223337114847062642415275176425187489080314072021259180624589121773879656606843755380587986935742827020950524810786066863585000549504905966075974508526965352260997035299506390353758637598581681543257560866541641350036027696944835986159791236216103574067026154854002215049328192720190082818455329584626441212529127615216725301289474537055949246761424958621641165771437773667608247039096815053967335795297728781408280247349893844998668064712177550718628318264638421550380350712627344076137321970964973639535236622386840897025546897346709711504907965920719535377626328948748527042716781216521956831710265918011003431416545872809354166049792498741313453053051412434968721860419210613686702491
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							27a3631b73ce11b3d2987e7c9576efe045f93f2a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digi.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.digi.no'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016fd6f794af000004030047304502205703a18b2ab70a1b31209b2ec085df9d3a8ded25e8e639973201b8e5a9d14c60022100c2eaacd79e83ed9c688f3b20b31889ffa0c509dfd7b4ba7291d63e0c85b64c4d007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016fd6f794c50000040300473045022057bb924446afad3c3ef0b09dd55d2cf87593dd233d8932f3d6059d6cf3a0ba8e022100eaac6900b77e096a86d66eb040353419c2606774338aac27e472675a1c0d9dca
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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